Re: Unwanted programs on Win2K

From: Pez Mohr (boredMDer74@msn.com)
Date: 02/05/03

  • Next message: Gedi: "Re: Unwanted programs on Win2K" 
    From: "Pez Mohr" <boredMDer74@msn.com>
To: "Kamran Muzaffer" <kmahmed@cyber.net.pk>, "Gedi" <gediintheuk@yahoo.co.uk>, <security-basics@securityfocus.com>
Date: Wed, 5 Feb 2003 15:18:51 -0500

    Kamran Muzaffer wrote:
    > Hi Gedi,
    >
    > I tried to _crack_ a .SAM file located in c:\WINNT\repair with LC4,
    > but it only shows Administrator and guest accounts and those are not
    > the current passwords either. I think windows saves the initial copy
    > of the password database there. That's the very reason why I think
    > its not that dangerous to leave that file there ( may be as a backup
    > ) because if it is so simple to recover all the Windows passwords,
    > than curing it, would have been the first step in all Win security
    > manuals.

    I heard something in the past about when first installing Windows, it will
    save a backup copy of the SAM to '%WinDir%\repair'. Whenever you use
    NTBACKUP, however, if you choose to backup 'System State', then it copies
    the SAM and puts it in '%WinDir%\repair' (if this is incorrect, please
    correct me). So if anyone has run NTBACKUP, be sure to head over to the
    repair directory, and delete the backups contained there.

    Pez Mohr
    boredMDer74@msn.com
    PGP Key: http://tinyurl.com/3rmk
    Fingerprint: 35F0 4088 BCA3 457C FDE4 3ABC 4E02 1AD7 9EBE 09FE

    Relevant Pages

    • Re: "You do not have access" for System State Backup
      ... Windows might hang and not want to shut down. ... The foremost advice is to enable "Verify" after backup inside ... brand new quality CD-R disk for a test burn. ... from ntbackup" though. ...
      (microsoft.public.win2000.registry)
    • Re: General backup question
      ... > with NTBackup, Nero, and assorted wizards, reading a variety of websites, ... > So the suggestion I made about do a system state backup (which has already ... I am quite prepared to backup whichever Windows and application ... programs other than NTBackup have this limitation. ...
      (microsoft.public.windowsxp.general)
    • Re: General backup question
      ... >> Nero, and Roxio plus a CD burner and a DVD burner are capable of taking ... NTBackup was around long before CDRW drives were popular ... Nero's backitup cannot backup open ... > files of which there are many when Windows is running. ...
      (microsoft.public.windowsxp.general)
    • Re: Backing up Exhange 5.5 mailboxes
      ... NTBackup will not back up to disk - period. ... You could perhaps do this same thing from a Windows ... > have the backup save to another drive or volume though. ... >> NTBackup will not back up individual mailboxes. ...
      (microsoft.public.exchange.admin)
    • Re: General backup question
      ... and Roxio plus a CD burner and a DVD burner are capable of taking ... > of those programs _FOR_ if I can't take a backup with them? ... NTBackup was around long before CDRW drives were popular ... files of which there are many when Windows is running. ...
      (microsoft.public.windowsxp.general)
    • Quantcast